Legal
Privacy Policy
Last updated 5 October 2026
ReviewFlow helps businesses ask their customers for Google reviews on WhatsApp. We keep only what that takes, we never sell personal data, and we never message anyone except on the instruction of a business that has their permission.
Who we are
ReviewFlow is operated by UNREEL (Unreel Creative For Design Services), a business licensed in the Emirate of Dubai, United Arab Emirates (trade licence no. 1619197). In this policy, “we” and “us” means UNREEL. You can reach us at hello@unreel.ae.
Who this policy covers
- Businesses that use ReviewFlow, and the people who sign in on their behalf.
- Recipients, meaning people who receive a review request from a business through ReviewFlow.
- Visitors to the ReviewFlow website.
What we collect from businesses
- Account details: your name, work email, business name, the name shown in your messages and your language preference. Passwords are stored only in hashed form by our authentication provider.
- Billing details: payments are handled by Stripe. We store your Stripe customer and subscription identifiers and your plan status. We never see or store full card numbers.
- Google Business Profile: when you connect it, and only with your permission, we access your business location details, your review link, and your reviews and replies, so we can show reviews in your inbox, alert you to new ones and post the replies you approve.
- WhatsApp Business: the identifiers of the WhatsApp Business number you connect, and the delivery status of the messages you send.
- Technical data: basic logs such as IP address, browser type and the pages requested, kept for security and troubleshooting.
What we hold about recipients
A business adds each recipient’s name, mobile number and preferred language, and confirms that the person agreed to receive messages from it. We record the time of that confirmation. When a request is sent, we store whether it was delivered and whether the review link was opened.
We process this information on behalf of the business that added it. The business decides who to message and is responsible for having each person’s permission. We act as its service provider. We do not use recipients’ data for our own purposes, we do not sell or share it, and we never message a recipient except on the business’s instruction.
Opting out: a recipient can reply STOP to any request, and that business will not be able to send them another one through ReviewFlow. Reviews themselves are written and posted by recipients directly on Google, under Google’s terms.
How we use information
- To provide ReviewFlow: sending requests, showing reviews, alerts, stats and reply drafts.
- To manage accounts, subscriptions and billing.
- To keep the service secure, prevent misuse and fix problems.
- To send service emails, such as new review alerts, billing receipts and trial reminders.
We do not use personal data for advertising.
Service providers
We use a small number of providers to run ReviewFlow. Each one processes data only to provide its service to us.
- Meta (WhatsApp Business Platform) delivers WhatsApp messages. Meta processes message content and phone numbers under its own terms.
- Google (Business Profile APIs) provides your business profile and reviews.
- Stripe processes payments and manages subscriptions.
- Supabase provides our database and sign-in.
- Vercel hosts the website and the application.
- Resend delivers our emails.
- Anthropic generates reply drafts when you ask for one. Only the text of the review and your business name are sent to produce the draft, and the provider does not use this data to train its models.
Some of these providers store data outside the United Arab Emirates, for example in the European Union or the United States, with industry-standard safeguards.
Google user data
ReviewFlow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google Business Profile data only to provide the features you see in ReviewFlow: your review link, your review inbox, review alerts and posting the replies you approve. We do not use it for advertising and we do not sell it. People at ReviewFlow do not read it unless you ask us for help, it is needed for security, or the law requires it. You can disconnect Google at any time in Settings or from your Google Account’s third-party access page.
How long we keep data
- Account data is kept while your account is open. When you close your account, we delete your account data and your recipient list within 30 days, except billing records we must keep by law.
- Recipient data is kept until the business deletes the recipient or closes its account.
- Technical logs are kept for up to 90 days.
Security
All traffic is encrypted in transit. Each business’s data is separated at the database level, so one business can never see another’s customers. Passwords are never stored in plain text, and payment card details never reach our servers.
Health information
ReviewFlow is not built to hold health records. Businesses should add only a name, a number and a language for each customer, and must not enter medical or other sensitive details. Review requests do not mention any treatment or service details.
Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that apply to you, you can ask to access, correct or delete your personal data, or object to certain uses of it. Businesses can do most of this themselves in Settings. If you received a review request, please contact the business that sent it; we will help it respond. You can also write to us at hello@unreel.ae.
Cookies
We use only the cookies needed to keep you signed in and to protect the service. We do not use advertising or tracking cookies.
Children
ReviewFlow is a service for businesses and is not intended for anyone under 18.
Changes to this policy
If we change this policy, we will update this page and the date above. If a change is significant, we will also email the businesses that use ReviewFlow.
Contact
UNREEL (Unreel Creative For Design Services), Dubai, United Arab Emirates.
hello@unreel.ae